0 /* need only encryption half */